Lucene search

K
oraclelinuxOracleLinuxELSA-2018-3032
HistoryNov 05, 2018 - 12:00 a.m.

binutils security, bug fix, and enhancement update

2018-11-0500:00:00
linux.oracle.com
504

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

80.7%

[2.27-34.base.0.1]

  • Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
    Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error [Orabug 27930573]
    [2.27-34.base]
  • Fix seg-fault parsing corrupt AOUT format files. (#1579799)
  • Fix seg-fault parsing corrupt DWARF2 debug information. (#1579802)
  • Fix seg-fault parsing corrupt ELF format files. (#1579801)
    [2.27-33.base]
  • Fix seg-fault parsing ELF files. (#1578979)
  • Fix seg-fault parsing DWARF-2 information. (#1579065)
  • Fix seg-fault parsing DWARF-2 information. (#1579051)
  • Fix seg-fault parsing a PE format file. (#1579019)
    [2.27-32.base]
  • Fix seg-fault parsing DWARF-1 information. (#1569580)
  • Fix seg-fault parsing DWARF-2 information. (#1569891)
  • Fix seg-fault parsing COFF files. (#1571917)
    [2.27-31.base]
  • Allow ‘lea foo@GOT, %reg’ in PIC mode on the x86. (#1573872)
    [2.27-30.base]
  • Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.
    [2.27-29.base]
  • Add support for the GLOBALAUDIT dynamic linker tag.
    (#1439351)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

80.7%